Privacy Policy
What we collect, and what we never do with it.
Last updated July 2026. This page is written in plain language on purpose — no legal filler, because this site exists for the exact opposite of that.
The short version
We collect what's actually needed to run the site and, if you make an account, to save your own things across visits. We don't sell your data, we don't run ad trackers, and we don't share letters with anyone outside the small set of people needed to run this project. If something you read below doesn't match how the site actually behaves, tell us — that's a bug in this policy, not permission for us to do it anyway.
Information you give us directly
If you create an account: your email address and password (handled by our authentication provider, Supabase — we never see or store your raw password ourselves).
If you use the Life Dashboard: saved resources, mood entries, journal entries, growth goals, and quotes you choose to save. This is private to your account.
If you write a Letter: your message, and optionally your name, email, and pronouns if you choose to include them. You can write privately, share anonymously to the public wall, request a personal response, or encrypt the letter client-side so that not even we can read it (see “Encrypted letters” below).
If you leave feedback, sign up for occasional updates, or contact us directly: whatever you send us in that message.
If you purchase membership, a package, or a one-time library download: payment is handled entirely by Stripe. We receive your name, email, and transaction details — never your full card number.
Encrypted letters
If you choose the “encrypted” option when writing a letter, the encryption happens in your own browser before anything is sent to us, using a passphrase only you have. We store the encrypted result, not the readable message, and we never see or store your passphrase. This means we genuinely cannot read these letters — which also means if you lose your passphrase, we can't recover the message for you either.
Information collected automatically
We run our own privacy-respecting analytics — deliberately not Google Analytics or any third-party tracker. It records which pages are visited and what search terms don't find a match, so we know what to build next. It does not record your IP address, does not use a persistent cross-visit identifier, and does not follow you across other websites. This matters here specifically: people search this site for things like “suicide” or “abuse,” and that data should never leave our own database, let alone reach an ad-tracking ecosystem.
What we use it for
To run the features you're actually using — saving your dashboard entries, delivering a letter reply, sending a receipt or membership confirmation, granting access to what you've purchased.
To respond if you've asked us to (a letter requesting a response, feedback, a direct email).
To understand what parts of the site are and aren't working, using the anonymous analytics described above.
We do not use your information for advertising, and we do not sell or rent it to anyone, ever.
Who we share it with
We use a small number of service providers to run the site, and share only what each one needs to do its job:
Supabase — our database and authentication provider. Hosts your account and the content you save.
Stripe — our payment processor. Handles all payment details directly; we never touch your card number.
Resend — our transactional email provider. Delivers confirmation emails, purchase receipts, and (if you've requested a personal reply to a letter) admin notifications.
We don't share your information with anyone else — no data brokers, no ad networks, no “marketing partners.”
The public wall and community board
Letters marked “anonymous-share” are only made public after a manual review, and never show your name or contact details even then. Posts on the “What Helped You?” board display anonymously, though each post is tied to an account on our end so we can remove anything that violates the site's spirit.
How long we keep it, and deleting your data
We keep account and dashboard data for as long as your account exists. You can request deletion of your account and everything tied to it at any time by emailing us — we'll confirm once it's done. Letters written privately or with a request for response are kept so we can honor that request; if you'd like one deleted specifically, tell us and we will.
Children's privacy
This site isn't directed at children under 13, and we don't knowingly collect personal information from them. Some of our content (the Parents & Loved Ones and School & Counselor collections, for example) is written for the adults supporting a young person, not for children to use unsupervised to create an account.
One more thing, honestly
This site is not a crisis service and isn't a substitute for professional mental health care. If you or someone you know is in crisis, please call or text 988(Suicide & Crisis Lifeline), available 24/7 — or your local emergency number if there's immediate danger.
Changes to this policy
If this policy changes in a way that meaningfully affects how your information is handled, we'll update the date at the top of this page and, where it's significant, say so somewhere more visible than a buried changelog.
Questions
Email us any time at thelinebetweenproject@gmail.com. We'll actually answer.